A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Contact: mailto:turrican@raumdock.de
Expires: 2028-02-07T00:00:00.000Z
Encryption: gemini://raumdock.de/pgp.gmi
Acknowledgments: https://raumdock.de/hall-of-fame.html
Preferred-Languages: de, en
Canonical: gemini://raumdock.de/.well-known/security.txt
-----BEGIN PGP SIGNATURE-----
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=tT9i
-----END PGP SIGNATURE-----